October 2020 Microsoft Patch Tuesday updates are rolling out

[PKCano]

The patches have been released. There are 360 new entries for October, 2020 Patch Tuesday in the Microsoft Update Catalog. There are 1838 vulnerabilit
[See the full post at: October 2020 Microsoft Patch Tuesday updates are rolling out]

3 users thanked author for this post.

abbodi86, woody, Microfix

[PKCano]

AKB 2000003 has been updated for Group B Win7 (ESU) and Win8.1 on October 13, 2020.

There is a Security-only Update for those with Win7 ESU subscriptions. At this time there appears to be no Oct. Cumulative Update for IE11.
October Rollup KB4580345 Download 32-bit or 64-bit for those with Win7 ESU subscriptions.
You must have August Servicing Stack KB4570673 previously installed to receive these updates)

There is an October Servicing Stack for Win7 KB4580970 – Download 32-bit or 64-bit for those with Win7 ESU subscriptions.

Also KB4578623 DST correction for Fiji Islands for those with Win7 ESU subscriptions.

For those of you attempting to install Win7 updates for .NET 4.5.2 and later (patches with the .exe extension), see post #2287984 . Also see #2304011.

There is a revised Licensing Preparation Package KB4575903 dated 7/29/2020 for Win7 ESU subscriptions, if you need it.

There are re-releases of the July .NET Security-only patches (v3) and well as the normal Oct .NET Security-only updates for Win7 and Win8.1 ONLY.
Re-released patches are KB4566466 for Win7 and KB4566468 for Win8.1.

6 users thanked author for this post.

SueW, doriel, radosuaf, abbodi86, woody, Microfix

[bbearren]

KB4578969 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Verion 2004 for x64
KB4579311 Cumulative Update for Windows 10 Version 2004 for x64-based Systems
KB4580325 Security Update for Adobe Flash Player for Windows 10 Version 2004 for x64-based Systems

installed successfully.  No hiccups, no issues.

Edit:  updated the B side of my daily driver and my laptop as well—smooth sailin’ all the way.

Edit: and my NAS.  It’s all good.

Create a fresh drive image before making system changes/Windows updates, in case you need to start over!

"When you're troubleshooting, start with the simple and proceed to the complex."—M.O. Johns

"Experience is what you get when you're looking for something else."—Sir Thomas Robert Deware

Computer Specs

• This reply was modified 6 days, 16 hours ago by bbearren.
• This reply was modified 6 days, 9 hours ago by bbearren.

[anonymous]

Updates Version 1909 installed with no problems…

[Microfix]

Win7 SMQR: KB4580345 and Security Only: KB4580387 patches.

Fixed an issue in Graphics Device Interface (GDI) that could cause unexpected user interface experiences such as missing screen elements, screen flickering, or a trailing screen.

hallelujah, it’s been recognised and hopefully fixed.

Sources:
https://support.microsoft.com/en-us/help/4580345/windows-7-update
https://support.microsoft.com/en-us/help/4580387/windows-7-update

Update: No more graphical anomolies 🙂

Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L

• This reply was modified 5 days, 23 hours ago by Microfix. Reason: Post installation update

3 users thanked author for this post.

fk5353, woody, PKCano

[geekdom]

Windows 1909 TestBeta
October 13, 2020

Checked for updates with WUMgr:

• 2020-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4578974)
• 2020-10 Security Update for Adobe Flash Player for Windows 10 Version 1909 for x64-based Systems (KB4580325)
• 2020-10 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4577671)

Installed updates from Windows Update:

• 2020-10 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Version 1909 for x64 (KB4578974)
• 2020-10 Security Update for Adobe Flash Player for Windows 10 Version 1909 for x64-based Systems (KB4580325)
• 2020-10 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4577671)

I was prompted to reboot, so I rebooted without error, and checked for updates again using Windows Updates.

2020-10 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4577671) showed as pending, but when I went to update, it presented an error: 0xc1900401. I checked for updates again and it stated: You’re up to date.

Under installed updates, all three updates showed installed.

I rebooted, checked again, 2020-10 Cumulative Update for Windows 10 Version 1909 for x64-based Systems (KB4577671) showed as pending, and got the same sequence of error and You’re up to date. I rebooted a third tine, got the same sequence. I then did a Disk Cleanup with Clean up system files. I rebooted a fourth time, checked for updates and none showed pending.

I had WUMgr running an update on KB4577671 simultaneously the first time which may have borked the update process for this particular update. Disk cleanup with Clean up system files appeared to have resolved the problem.

G{ot backup} TestBeta
offline▸ Win10Pro 1909.18363.959 x64 i3-3220 RAM8GB HDD Firefox79.0 WindowsDefender
online▸ Win10Pro 1909.18363.1139 x64 i5-9400 RAM16GB HDD Firefox82.0 WindowsDefender
TargetReleaseVersion=1909
WUMgr

• This reply was modified 6 days, 19 hours ago by geekdom.

2 users thanked author for this post.

Coldheart9020, abbodi86

[Barry]

Updates Successfully installed. No apparent problems.

Barry
Windows 10 Home V 2004

[Alex5723]

KB 4580352 — 2020-10 Security Update for Adobe Flash Player on Win8.1 and Win10.

No Flash patch in the catalog for 1909 ?

[PKCano]

KB4580325 – it is the same for v1903 and v1909. (check 25 on the end, not 52.)

[DRW]

bbearren wrote:

KB4578969 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Verion 2004 for x64
KB4579311 Cumulative Update for Windows 10 Version 2004 for x64-based Systems
KB4580325 Security Update for Adobe Flash Player for Windows 10 Version 2004 for x64-based Systems

installed successfully.  No hiccups, no issues.

Edit:  updated the B side of my daily driver and my laptop as well—smooth sailin’ all the way.

Edit: and my NAS.  It’s all good.

• This reply was modified 6 days, 16 hours ago by bbearren.
• This reply was modified 6 days, 9 hours ago by bbearren.

I had a brief hiccup when it hung restarting. But it seems to be running smoothly now.

(And for those shocked at my risk, I created a mirror image backup before I started).

1 user thanked author for this post.

bbearren

[anonymous]

There are some pretty serious CVEs this time, included an ipv6 remote code execution vulnerability with a CVSS score of 9.8! Probably important to apply a mitigation even if you don’t want to install the patch yet.

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2020-16898

[Paul T]

Most people don’t run IPV6 networks so router advertisements won’t show up, but an attacker with local network access can send such packets, making this a much less critical issue for home users.

cheers, Paul

[anonymous]

Most people don’t run IPV6 networks so router advertisements won’t show up

I’m not sure if this is true anymore. Many networks, including home networks have ipv6 these days.

but an attacker with local network access can send such packets

Router advertisements are simply a type of ICMPv6. Although they are typically sent local multicast, they can be sent over the internet if not blocked with a firewall. Spoofing is a real problem, even without this kind of CVE, which is why RA guard exists.

I wonder if this is a more critical issue for home users because they don’t configure their firewalls carefully and have professional features like router advertisement guard available.

[Carl D]

Another “brave soul” here again (with the appropriate Macrium Reflect images to fall back on if needed, of course).

All ‘Patch Tuesday’ (actually Wednesday here in Western Australia) updates installed. No apparent issues so far.

I’d still like to know why it takes so long to install Windows 10’s monthly updates? I probably could have clean installed Windows 10 twice (from a USB3 stick to a SSD) in the time it took for the monthly patches to download and install.

The download part is quite fast, its the installation of the patches that takes ages – about 25 minutes for the whole exercise including the required reboot.

Gigabyte GA-B250M-D3H Motherboard, Intel i5-7600 CPU, 32GB RAM, NVIDIA GeForce GTX 1050 Graphics Card, 1x Samsung 860 EVO 250GB SSD, 1x Samsung 850 EVO 250GB SSD, Windows 10 Professional 2004 64bit.

1 user thanked author for this post.

bbearren

[geekdom]

Carl D wrote:

The download part is quite fast, its the installation of the patches that takes ages – about 25 minutes for the whole exercise including the required reboot.

As near as I can tell, an update removes the packages that it no longer needs and then adds the packages it needs. You are also getting the one-size-fits all treatment with all changes rolled into a single update.  In earlier days, updates were identified by function, they didn’t remove earlier incarnations, and there may have been as many as six or eight updates on patch day.

G{ot backup} TestBeta
offline▸ Win10Pro 1909.18363.959 x64 i3-3220 RAM8GB HDD Firefox79.0 WindowsDefender
online▸ Win10Pro 1909.18363.1139 x64 i5-9400 RAM16GB HDD Firefox82.0 WindowsDefender
TargetReleaseVersion=1909
WUMgr

• This reply was modified 6 days, 7 hours ago by geekdom.

1 user thanked author for this post.

Carl D

[radosuaf]

Hmmm… Windows 20H2 not offered.

MSI H110 PC MATE * Intel Core i5-6402P * 2 x 8 GB Corsair Vengeance LPX DDR4 2133 MHz * Aorus Radeon RX 570 4GB * Samsung 840 EVO 250GB SSD * Western Digital Blue 1TB HDD * Seagate Barracuda 1TB HDD * DVD RW Lite-ON iHAS 124 * Creative X-Fi XtremeGamer PCI * Windows 10 Pro 2004 64-bit

[CraigS26]

Oct CU was Uneventful & about 12 minutes …. KB4577670 = SSU/ KB4577671 = Oct CU/ KB4578974 = showed the July date NetFrmWk Re-issue per Woody/ KB4577926 =  adds support for new HP Windows Mixed Reality Motion Controllers/ KB4580325 = Flash Player Security; Office ’16 C2R Manual Updates OK/ Macrium always on stand-by……..

W10-64 1909 Pro / Hm-Stdnt Ofce '16 C2R / HP Envy Desktop-Ethernet/ 12 GB / 256G SSD + 1 TB HDD / i5 Coffee Lake/ GP=2 + FtrU=365 + QU=0

• This reply was modified 6 days, 2 hours ago by CraigS26.

[abbodi86]

Option to disable JScript execution in Internet Explorer

[EP]

so woody, what do you think of this recent Bleepingcomputer article – US Cyber Command: Patch Windows ‘Bad Neighbor’ TCP/IP bug now:

https://www.bleepingcomputer.com/news/security/us-cyber-command-patch-windows-bad-neighbor-tcp-ip-bug-now/

patch or no patch (meaning wait until it’s safe)?

• This reply was modified 5 days, 21 hours ago by EP.

[Microfix]

also there’s another article published regarding a Windows Spoofing Vulnerability that abuses CAT files :

Microsoft advises users to apply the October 2020 updates that contain fixes for both the CVE-2020-1464 and CVE-2020-16922 vulnerabilities.

microsoft-fixes-windows-certificate-spoofing-bug-abusing-cat-files

Win8.1 Pro | Linux Hybrids | Win7 Pro O/L | WinXP O/L

[Cameochi]

Hello everyone. Cameochi here. Even my dogs think I’m nuts but I installed the October 2020 updates today. Before attempting the install I created a restore point, backed up my user files to an external hard drive and created a USB recovery file – just in case. I no longer allow automatic updates as last November Microsoft installed the server version of the update instead of the one for Windows 10. What a nightmare that was. Still I like to stay up-to-date so I clicked on “Check for Updates” and off we went with K4579311. It was not fun and it was not quick but my system is now at 19041.572. I hope this really is the final version of Windows. It was not a quick and easy update so be prepared to spend some time on it if you decide to take the risk. My recommendation would be to do as Woody says and hold off for now. Happy computing everyone.

• This reply was modified 5 days, 20 hours ago by Cameochi. Reason: typo
• This reply was modified 5 days, 20 hours ago by Cameochi.

[anonymous]

Just updated 1909 to 18363.1139

no apparent issues

[anonymous]

Hi from Berlin,

Until last night (local time in Germany), I had been running Win 10 pro x64 v.1909 on my Intel NUC8i3BEH, with a Samsung 970 EVO Plus M.2 NVMe SSD, for about three weeks.

As I do every patch Tuesday, just after the patches were released (19.00 local time), I looked around some of my regular sites (including this one).

I read here that some people had had no problem with yesterday’s Win 10  updates, so I decided to take the plunge.

To make a long story short, I was forced to update to 2004. It took a really long time to download and install (at least an hour on my WLAN), but in the end, it worked with no problems.

This morning I rechecked for updates and was told I’m up to date.

I’ve been using it all day and haven’t noticed any problems, or even any visible difference from 1909.

The only thing worth noting is that after reboot following the updates, the program Classic Shell told me that it had to reconfigure itself to return my settings. It did this without incident.

If it’s of any interest, on Monday I had set up the program ShutUp10. It appears to have had no influence on the update process.

[kiwisolutionz]

V1909_W10_x64 Bit Still Possible?

I too have the V1909_W10 file but am I right in reading a user was forced to update to V2004 or similar? I downloaded 1909 after many users liked the stability of the platform; is this still correct team or have I been on the road too long driving tankers (!) Cheers All ; >)

If there is magic on this earth ... it's in the water.

[Alex5723]

Yes, some Windows 10 1909 were auto updated to Windows 2004, usually after un-pausing or clicking on ‘check for updates’.
Depending on your 1909 version (home/pro) follow the advice in :
AKB 2000016: Guide for Windows Update Settings for Windows 10
to control installation of monthly updates and feature upgrades. 1909 will be supported until 5.2021.

You can still secure a copy of 2004 downloading it directly from Microsoft using the MCT tool .

It’s time to be thinking about saving a copy of Win10 v2004

• This reply was modified 5 days, 7 hours ago by Alex5723.

1 user thanked author for this post.

kiwisolutionz

[PFC]

KB4578969 Cumulative Update for .NET Framework 3.5 and 4.8 for Windows 10 Verion 2004 for x64
KB4579311 Cumulative Update for Windows 10 Version 2004 for x64-based Systems
KB4580325 Security Update for Adobe Flash Player for Windows 10 Version 2004 for x64-based Systems

yesterday I hid these 3 updates and this morning only KB4579311 is still shown as hidden, the other two did not install and don’t show anywhere.

Any thoughts?

[PKCano]

Reminder: If you have Pause or Quality Deferrals set, available updates won’t show in the Windows Update queue

[PFC]

it’s a pro system with only gpedit notification #2 on.
so I need more thoughts.
thanks

[PFC]

so here is what I see now:
KB4580325 Security Update for Adobe Flash Player for Windows 10 Version 2004 for x64-based Systems got installed today as per Control Panel installed updates and
KB4578968 got installed today (called Update for Microsoft Windows) so is this one the same as KB4578969 for .Net?
These two updates WERE hidden and got installed by Microsoft Magic.

[PKCano]

KB4578968 is the .NET update for v3.5 and 4.8.

KB4578969 is not the same. It is the .NET update for Win10 v1607, which is not for your computer.

[PFC]

I will continue to be cautious, I did not imagine what was offered for update, what I hid and what got installed.

[anonymous]

The KB4580345 (Rollup, Win7 x64) contains new files with version 11.0.9600.19846:

ieframe.dll
ieframe.oca
mshtml.dll
mshtml.tlb

Those files are missing in the KB4580387 (security-only).

In september those files were in the IE11 cumulative update KB4577010, but with the older version 11.0.9600.19811.

A new IE11 cumulative update is not available, because the IE11 is out of support now.

The installation of MS Edge Browser doesn’t change those files either.

So how can I get those newer files without installing the rollup?

 

[abbodi86]

IE11 is not out of support
it will be patched until 2029 at least

this month there were no new security vulnerabilities related to IE11 or Microsoft Edge Legacy
hence no new IE11 CU

the updated IE11 files in this month CUs/Rollups are quality fixes

1 user thanked author for this post.

SueW

[IO8973]

Hi, I have now Windows 10 Home v. 1903 x64 Build 18362.900 (7/08/2019). The installation of Windows 10 to v. 2004 fails at 35%. The reason is because HVCI is switched ON they say (Hyper-V). Can I safely switch HVCI OFF in Windows-security – Core integrity protection? It’s the update 2004 they want to install. I made a full Windows Image Backup on an external HD.

[Paul T]

You’d be better off starting a new thread for this.

cheers, Paul

[IO8973]

Hi Paul, thanks for the reply. I will start by simply following the hint from Microsoft and switch this bit annoying HVCI off and see wat happens, if the installation of that 2004 update succeds, I will be satisfied of course.

[IO8973]

Ok solved!, following that mentioned procedure, could install the 2004 update smoothly and without any more special problems. 🙂

[IO8973]

Sorry, the Virtualisation problem is apparently not entirely solved. When I tried via Windows security on that pc > Core Isolation > Memory Integrity – to put this protection back on the original ON position that didn’t work any more. So, actually there is now a compatibility problem with a driver igdkmd64.sys (Intel).

[brian1248]

The link to Ghack’s is bad on the October patch post.

The link currently has “september” in the URL instead of “october”

https://www.ghacks.net/2020/10/13/microsoft-windows-security-updates-september-2020-overview/

it should be

https://www.ghacks.net/2020/10/13/microsoft-windows-security-updates-october-2020-overview/

Consequently, anyone taking the link gets a 404 error.

1 user thanked author for this post.

PKCano

[DriftyDonN]

I have not been offered any updates by WU as of now. Last time checked was 13 Oct early in morning Eastern time but wu hasn’t checked since then. Any ideas why? Updates set to 2 in Gp Edit and quality updates set to 0. no pause set. I last installed patch 5 Oct for sept offers.

Thanks

[brian1248]

I forget to reset my connection to metered (which has been my go to method for delaying things, along with wushowhide), so it downloaded and updated KB4577671 and KB4578974 (Windows 10 1909 Home).  I ran wushowhide to hide them, but I suspect that the download had already happened due to the non-metered connection.  No problems so far.

However, it also downloaded and updated KB4577926 which does not show in Windows Update in settings Update History anywhere.  I know about it only because I also run Belarc Advisor, which told me about it.

https://support.microsoft.com/en-us/help/4577926/asset-update-for-windows-10-version-1903-1909-mixed-reality

I had manually update the Flash Update already, KB4580325, and the Servicing Stack update was applied at that time as well.

[EP]

@woody

Windows 8.1 security rollup KB4580347 security-only update KB4580358 may also block some 3rd party drivers

so this problem occurs in Win8.1 as well as with most Win10 versions with their Oct. 2020 patches

Born wrote about the issue almost recently:
https://borncity.com/win/2020/10/16/windows-10-blockt-falsch-signierte-treiber/

• This reply was modified 2 days, 17 hours ago by EP.

1 user thanked author for this post.

woody

[anonymous]

Win 10 1909 Pro 64 bit.  Downloaded SSU KB4577670 and CU KB4577671 from the Update Catalog, standalone installed OK, 2 test systems stable for 2 days.

[fracky]

“A reminder if you are on Windows 10 v1809 or v1903. It is time to think about moving to a later version. V1809 reaches EOS on 2020-11-10 and v1903 on 2020-12-08.”

I believe 1809 EOS is 05/11/2021

[PKCano]

Windows 10, version 1809 (Home, Pro, Pro Education, Pro for Workstations, IoT Core). The final security update for this version will be released on November 10, 2020, instead of May 12, 2020. In

https://docs.microsoft.com/en-us/lifecycle/announcements/lifecycle-changes-eos-servicing-dates

[Splorchess]

Going to throw in my 2 cents on recent OCT patches.

I work as a patch manager for a decently sized datacenter (We use VMWare). Today started our test/dev deployment cycle. Patches installed fine and servers rebooted and came up. Some of our 2008 R2 servers require a reboot order to get all their services to come back online properly. Upon their second reboot they started blue screening and failing to load windows. We tested rebooting some of the 2008 R2’s that weren’t part of any application and had the same issue. about 1/3 of the 2008 R2’s have failed to blue screen.

I now get to spend the next few hours rolling back all the changes. I’ll be investigating the issue further tomorrow.

Take care this cycle everyone.

EDIT: Patches installed

KB4580345 – Cumulative
KB4580970 – Servicing stack
KB4578952 – .NET
KB4578955 – .NET
KB4578623 – Update for 2008 R2

Error Code : 0x0000007B

• This reply was modified 11 hours, 33 minutes ago by Kirsty.
• This reply was modified 11 hours, 33 minutes ago by Kirsty.
• This reply was modified 11 hours, 18 minutes ago by Splorchess.

[Author]

Posts